Virus removal- any ideas?

slaterio

Hi I currently use AVG spyware and anti virus and I have in the virus vault several virus that I can't seem to get rid of:
Obfustat.ACRR
Packed Morphine D
Trojan Horse BHO CVX

I have tried adware, spybot, windows defender, updated pc but i can't get rid of them.
Any ideas?

timestar

If you mean AVG has quarantined them then they cannot harm your PC.

espresso

Read AVG Help Topics:

The Virus Vault is used to lock up infected files out of harms way. You can use the Virus Vault to heal files at a later date and restore them to their original locations on your disk. Files are moved to the Virus Vault during tests and by resident components like the AVG E-mail Scanner.

slaterio

Cheers thanks for that,they are in the virus vault but is there any way of getting rid completely, or should I just 'not worry about it'
Thanks again.

espresso

slaterio wrote: »

Cheers thanks for that,they are in the virus vault but is there any way of getting rid completely, or should I just 'not worry about it'
Thanks again.

Read Help Topics where all is explained.

bjdouros

Unfortunately YES you need to be worried about it!! This virus was released on our computer on Dec 13th 2007. AVG said it detected the Trojan “Packed.morphine.d” and quarantined it, but I come to find out that it actually didn’t or at least didn’t remove all of it. From what I can tell this is a “Brand New” virus that only started showing up on the virus boards as of Dec 15th or so. When I caught it and started trying to remove it with the standard tools, AVG, AdAware, HighJackThis, etc. they didn’t get rid of it. The things AVG said it removed where:

Virus Name: Sheur.AFRE
File Name: dm163.exe

Virus Name: BHO.CVX
File Name: adsldpv.dll

Virus Name: Packed.morphine.d
File Name: Audiodevb.dll

At first it seemed like I was in the clear but then on the 14th I kept getting virus found warnings from AVG regarding the Audiodevb.dll file every time I would open IE or Windows Explorer. I tried to quarantine the file with AVG, no luck, even in safe mode. I also tried HighJackThis in safe mode and still could not get rid of this file. Eventually I tried to delete the file in safe mode from a cmd prompt, “del Audiodevb.dll” from the windows/system32 folder, which actually did work. I rebooted and finally the prompts went away. So I thought I was in the clear again, wrong, all of my Internet connectivity was now hosed! I don’t know at what point it had messed up my internet connectivity since I had restarted my pc like 20 times and had ran through full system scans a couple of times which took a couple of hours. I tried to check the ipconfig settings at that time which came back “unable to query host name”. I then checked the host file, but it was clean. I also checked what services were being started up with the computer again and found a new entry referring to a file called “rpcc.exe”, which I now know is yet another virus. Removed rpcc.exe entry but it still didn’t fix the Internet issues. Eventually after hours of frustration I ended up rebuilding the OS since I didn’t have a windows repair disc and no internet. I’m sorry that this may not help you but hopefully my experience will lead others to find a solution to this malicious virus!! Oh, one last thing, after I rebuilt the pc and was able to get up and running again, I checked my email and had received a notice from Comcast stating that they had shut down all of my outbound email traffic through port 25 due to a potential virus threat coming from my computer.

CGG

I'm no Computer Wizard, but right now AVG is doing it's daily scan/test thing and it's already showing 2 threats found. They are 'Trojan horse Agency.MIY'.
What should I do?
Thanks in advance.

pchelpman

My view is always clear out AVG's virus vault ...

1. double click the AVG icon in the notification area/system tray ...

2. left click Test Centre ...

3. left click Virus Vault ...

4. right click any items in the Vault and choose "delete".


Both malware infections mentioned here, "Obfustat" and 'Trojan horse Agency.MIY" are indeed new.

"Obfustat" seems to have changed name to " Packed.morphine.d".

The anti malware programs will be including them in the removal capabilities but, for now, be very careful.

Trojan Horses usually get on to machines by the user allowing them through. Watch what you click to "allow".

For these infections you should download, install and run these programs. Let them fix anything they find. Hopefully at least one of them will crack this .....

TrojanHunter > http://www.misec.net/

Superantispyware > http://www.superantispyware.com/

Dr Web Cureit > http://freedrweb.com/

AVG Anti Spyware > http://free.grisoft.com/doc/5390/us/frt/0?prd=asf


FOOTNOTE >> if you think about using ComboFix for this then don't. Never use CF unless under the supervision/direction of a trained HJT analyst. CF is a very powerful tool which has the capability to trash your system.


PCH

slaterio

pchelpman wrote: »

My view is always clear out AVG's virus vault ...

1. double click the AVG icon in the notification area/system tray ...

2. left click Test Centre ...

3. left click Virus Vault ...

4. right click any items in the Vault and choose "delete".


Both malware infections mentioned here, "Obfustat" and 'Trojan horse Agency.MIY" are indeed new.

"Obfustat" seems to have changed name to " Packed.morphine.d".

The anti malware programs will be including them in the removal capabilities but, for now, be very careful.

Trojan Horses usually get on to machines by the user allowing them through. Watch what you click to "allow".

For these infections you should download, install and run these programs. Let them fix anything they find. Hopefully at least one of them will crack this .....

TrojanHunter > http://www.misec.net/

Superantispyware > http://www.superantispyware.com/

Dr Web Cureit > http://freedrweb.com/

AVG Anti Spyware > http://free.grisoft.com/doc/5390/us/frt/0?prd=asf


FOOTNOTE >> if you think about using ComboFix for this then don't. Never use CF unless under the supervision/direction of a trained HJT analyst. CF is a very powerful tool which has the capability to trash your system.

Thanks I have done he above and am now rid of 4 infections but the Packed. Morphine D is still hanging on! It is currently quarantined in the virus vault and as yet has not reappeared so far. Thanks anyway my PC seems much happier
Cheers

pchelpman

If it's in quarantine you're safe but I would still try to get rid of it.

Can you not follow the four stage process outlined in my last post to clear the vault?

What happens when you choose "delete" in step 4? Doesn't it go away? Does it reappear in the vault or somewhere else after a reboot?


PCH

xerox

I've used the above software to get rid of a virus and trojans from my pc but now I have a problem with the DVD drives not recognising any discs. Error message says they are either corrupt of unrecognised by the operating software.I would appreciate any ideas on this as it is driving me mad and I need to get my scanner reinstalled asap.